CVE-2023-23075

Published: Feb 1, 2023Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation.

Affected (38)

Products: Zohocorp: Manageengine Assetexplorer

Zohocorp

1 product

Manageengine Assetexplorer

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Assetexplorer	Version 6.9
Zohocorp Manageengine Assetexplorer	Version 6.9 6900
Zohocorp Manageengine Assetexplorer	Version 6.9 6901
Zohocorp Manageengine Assetexplorer	Version 6.9 6902
Zohocorp Manageengine Assetexplorer	Version 6.9 6903
Zohocorp Manageengine Assetexplorer	Version 6.9 6904
Zohocorp Manageengine Assetexplorer	Version 6.9 6905
Zohocorp Manageengine Assetexplorer	Version 6.9 6906
Zohocorp Manageengine Assetexplorer	Version 6.9 6907
Zohocorp Manageengine Assetexplorer	Version 6.9 6908
Zohocorp Manageengine Assetexplorer	Version 6.9 6909
Zohocorp Manageengine Assetexplorer	Version 6.9 6950
Zohocorp Manageengine Assetexplorer	Version 6.9 6951
Zohocorp Manageengine Assetexplorer	Version 6.9 6952
Zohocorp Manageengine Assetexplorer	Version 6.9 6953
Zohocorp Manageengine Assetexplorer	Version 6.9 6954
Zohocorp Manageengine Assetexplorer	Version 6.9 6955
Zohocorp Manageengine Assetexplorer	Version 6.9 6956
Zohocorp Manageengine Assetexplorer	Version 6.9 6957
Zohocorp Manageengine Assetexplorer	Version 6.9 6970
Zohocorp Manageengine Assetexplorer	Version 6.9 6971
Zohocorp Manageengine Assetexplorer	Version 6.9 6972
Zohocorp Manageengine Assetexplorer	Version 6.9 6973
Zohocorp Manageengine Assetexplorer	Version 6.9 6974
Zohocorp Manageengine Assetexplorer	Version 6.9 6975
Zohocorp Manageengine Assetexplorer	Version 6.9 6976
Zohocorp Manageengine Assetexplorer	Version 6.9 6977
Zohocorp Manageengine Assetexplorer	Version 6.9 6978
Zohocorp Manageengine Assetexplorer	Version 6.9 6979
Zohocorp Manageengine Assetexplorer	Version 6.9 6980
Zohocorp Manageengine Assetexplorer	Version 6.9 6981
Zohocorp Manageengine Assetexplorer	Version 6.9 6982
Zohocorp Manageengine Assetexplorer	Version 6.9 6983
Zohocorp Manageengine Assetexplorer	Version 6.9 6984
Zohocorp Manageengine Assetexplorer	Version 6.9 6985
Zohocorp Manageengine Assetexplorer	Version 6.9 6986
Zohocorp Manageengine Assetexplorer	Version 6.9 6987
Zohocorp Manageengine Assetexplorer	Version 6.9 6988

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator

Source: cve@mitre.org

Not ApplicableVendor Advisory

https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator

Source: af854a3a-2127-422b-91ae-364da2661108

Not ApplicableVendor Advisory

Timeline

No history available yet.